If this is the case, is there a way to protect against it? Is there a way to keep the data encrypted? Thinking along the lines of bitlocker on windows.
Without the pipe dream of efficient homomorphic encryption you can’t protect your data from a hostile VPS provider.